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© An apparatus lor effecting and recording monetary tia nm c uons . 



© Apparatus for affecting and recording monetary transac- 
tions inctudtng apparatus for registering the present value ol 
money therein, apparatus for setectabJy adjusting the regis- 
tered value to indicate a payment and receipt transaction, and 
identity verification apparatus including asymmetric crypto- 
graphic apparatus coupled to the apparatus for adjusting tor 
ectrvstion thereof. The apparatus as a whole is provided as 
an electron i c wallal (10) comprising a display (12). a key- 
board (14) and a connecting jack (16). 
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AM APPARATUS FOR EFFECTING AND RECORDING MONETARY TRANSACTIONS 



Tha present invention relates to an apparatus tor effec- 
ting and recording monetary transactions. 

Conventional wsSets in which one carries cash money 
have tang been known. One can open tha wallet and 
extract an amount which does not exceed the present value 
therein, in order to make a payment, or one can receive 
payment from another party and deposit tha received 
amount in the wallet, to increase the value therein accord- 
ingly. 

Many methods exist for removing the inconvenience 
and risks of carrying cash in one's wafiet These include 
personal checks, traveler's checks, vouchers and credit 
cards, just to name a few. In addition, in order to eliminate 
the need for proximity during the transaction, methods have 
been developed for making paymente from afar, such as 
using tha ma3 system, talegraphmg money orders and elec- 
tronic fund transfer systems. 

These systems suffer from a number of disadvantages. 
There is no easy way to verify that a payment received is 
not forged or that it is backed by proper credit (particularly 
in the case of checks and credit cards). Payments received 
cannot easily increase the current value or fund which is 
available for making payments. Bactroruc fund transfer sys- 
tems are not suitable, in their present form, for use by an 
individual making an everyday payment 

There exist a number of so-called French Smart Cards 
distributed by a number of French companies which enable 
one to make payments but not to receive them. They are 
simitar to ordinary automatic credit cards or banking cards, 
such as BANKOMAT in Europe, but the identification pro- 
cedure seems to be more rafiabte since it may involve some 
cryptographic computations and not merely reading a mag- 
netic tape. The details of their operation have not been 
published. 

Davies' Signature Token cescribed by D.W. Davies in 
"Use of the 'Signature Token' to Create a Negotiable 
Document*, presented in Crypto 83, Santa Barbara, CA, 
U.S-A^ August 1883 claims to enable the rjreverrfon of 
forgeries, but is unabfe to register the balance of the value 
available. 

U.S. Patent 4,320,387 to PoweO discloses apparatus 
for providing secured communication of information compris- 
ing tridhndua) units including display of information to be 
convrtuncated, electronic circuit means providing automatic 
security of transmission between relatively remote units that 
are intended to be included in a specific transfer of informa- 
tion, electronic intomaii un storage maans for recording of 
e cnim unicated infui H mb un, and radiant energy signal trans- 
mitting devices for effecting coupling of any two selected 
apparatus units that are to participate in the irtformalion 
transfer. Ttme-base corrtroCad signal encoding is utiTczed to 
effect generation of the communication to the two s elec t ed 
units and to provide security of transmission. This electronic 
circuitry includes a time-control base which is functional to 
change its control function in the same amount of time as 
that which would be required to complete one trartsacton in 
the recording phase of operation. 

In operation, a coded signal corresponding to the in- 
formation to be transfsrred is transmitted by one apparatus 
and received by the second. The receiving apparatus uti- 
lizes the same time^xmtro) base encoding to encode the 
data it expects to receive (le.. as manually input by the 
owner). It than compajes the received encoded data with 
the encoded expected data if identical, the transaction 



proceeds. Since the encoder signal changes over time, 
certain fraudulent transactions are prevented since the re- 
ceived encoded data wiD not accord with the encoded 
expected data. 

5 This apparatus suffers from a number of disadvan- 

tages. First, it is possible to bypass a portion of the iden- 
tification system of each apparatus unit thereby lowering the 
security of the system. Second, and more importantly, 
knowledge of the trnie-control base function gained from 

10 any one apparatus unit permits one to engage in many 
fraudulent transa c ti ons, threatening the entire monetary sys- 
tem with collapse. Third, coded identification for aJJ the other 
units are included in the memory of each unit, requiring a 
large memory capacity. 

75 A pre fe rred embodiment of the present invention may 

provide an electronic waDet which permits both payment 
and receipt of money, which includes an automatic iden- 
tification system which prevents forgeries and which cannot 
be bypassed 

20 According to one aspect of the present invention there 

is provided an apparatus for effecting and recording mone- 
tary transactions comprising: means for registering the 
present value of money therein, means for s ete ctabfy ad- 
justing tha registered value to seiectabry indicate payment 

26 and receipt responsive to a manual control input and 
identity verification means coupled to the means for adjust- 
ing tor activation thereof. 

According to a preferred embodiment of the invention, 
the means for set ectably adjusting includes means for deter- 

30 mining whether the tra/tsaccon is permitted, and means for 
effecting transfer of value coupled to the means for register- 
ing present vahie. 

Further according to a preferred embodiment, the 
maans for identity verification includes cryptographic means 

35 which may include secret key encoder means arranged to 
encode data transmitted by the apparatus, and known key 
decoder means arranged to decode encoded data received 
by the apparatus. 

Further hi accordance with a preferred embodiment, 

40 the apparatus further includes cryptographic owner iden- 
tification means. 

Additionally tn accordance with a preferred embodi- 
ment, the apparatus further comprises means for destroying 
the registered information which is activated by unauthoriz- 

45 ed physical entry. 

There is further provided means for institutional valida- 
tion of the apparatus. 

According to another aspect of the present invention 
there is provided apparatus for effecting and recording 

50 monetary transactions orctuding: means tor registering the 
present monetary value of the apparatus; means operative 
in response to a first manual control input for identifying a 
permitted user; means operative in response to a second 
manual control input for registering the monetary value of a 

55 transaction; means for transmitting an encoded output signal 
corresponding to identification of the apparatus; means tor 
receiving an encoded input signal corresponding to iden- 
tification of an apparatus with which the tran sa c ti on is to be 
effected; means for decoding and verifying the encoded 

60 received signal; means for transmitting an output signal 
ccrresporxting to the monetary value of the transaction to 
the apparatus with which the transaction is to be effected; 
means for receiving an input signal corresponding to the 
monetary value of the transaction from the apparatus with 

65 which the transaction is to be effected; means tor detesinin- 
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ing whether the transaction is permitted; means tor transmit- 
ting an encoded output signal corresponding to the mone* 
tan/ value and (Erection of the transfer in the transaction to 
the apparatus with which the transaction is to be effected: 
means tor receiving an encoded input signal corresponding 
to the monetary value and Erection of the transfer in the 
transaction hum the apparatus with which the transaction is 
to be effected; means for decoding and verifying the re- 
ceived signal; and means tor adjusting the registered 
present value in accordance with the transfer effected by 
the transaction. 

An apparatus d the present invention wiQ be further 
understood and appreciated from the following detailed de- 
scription taken in conjunction with the drawings in which: 

Fig. 1 is an lustration of an electronic waflot con- 
structed and operative in accordance with an embodiment 
of the present invention; and 

Fig. 2 is a block diagram illustration of the electronic 
circuitry employed in the electronic waflet of Figure i. 

With reference to Ftg. 1 there is shown an electronic 
waflet generally designated 10 constructed and operative in 
accordance with an emtjodimsnt of the present invention. 
The wallet may have the genera) appearance of a small 
pocket calculator, and comprises a display 12 of any con- 
ventional design, a keyboard 14 and a connecting jack or 
other coupling device 1 6. 

Referring now to Fig. 2 there ts shown in block Dia- 
gram form the electronic circuitry employed in the electronic 
wallet of Figure i. The circuitry includes a CPU 20 such as 
a mic roprocessor, including input/output interface and a 
ROM, tor example model 8041A of Intel CcrpL, USA, a 
RAM 22. such as a 64K RAM, model number 21&» and 
a«wrjr»«Brt controller 24. such as model 6203, both of Intel 
Conx, and en E*PROM 26, such as an E=PROM. 2KxB, 
model 2817 of I mal Corp., aO coupled by bus 28. The 
wallet is powered as by batteries (not shown). RAM 22 
serves to register the present value of the wallet atong with 
the various transactions in which it has participated, as will 
be explained in detaO henanbetow. Microprocessor 20 is 
operative to adjust the present value r e gi stered in E=PROM 
26 at any given time in accordance with a pre-programmed 
protocol 

A keyboard 30, which may comprise any conventional 
keyboard, preferably an aJphamirrtertcal keyboard, is coup- 
led to rricfoprocessor 20 for input of transaction data and 
persona) identification codes. A display 34, which may 
comprise any conventional means for providing a visual 
display, is also coupled to rnicroprccessor 20 for providing a 
visible output indication of the transaction data There is 
also provided connecting means 38, such as a connecting 
jack or any other conventional means for coupling two 
electronic wallets for information transfer therebetween. 

The electronic waflet also contains a real time clock 
40, such as a Tune of Day (T.O.D.) Clock, number 
WD2412, manufactured by Western Digital Corp.. USA. 
which acts to record the time at which each transaction of 
the waSet occurs (30 bits are sufficient to represent time 
with resolution of seconds over a period of 30 years). The 
provision of a real time dock permits transactions between 
any wallets having compatible hardware and compatibte 
transaction protocol while preventing such fraudulent trans- 
actions as improper repetition of a transfer. 



In addition, the waflet preferably contains a list cf 
cancetted wallets to prevent receipt of payments from wal- 
lets wrtich have been found to be fraudulent or were re- 
ported stolen or tost Such a list could be supplied to the 
5 wallet during validation. By issuing new series of identifica- 
tion numbers to the wallets periodically, this list can be kept 
short 

Preferably the waflet includes an audit trafl, a Est of all 
transactions of the waflet since the last validation, including 

10 aO proofs of payments made to the wallet and receipts of all 
payments made by the wallet The audit trad is retained in 
the RAM of the wallet until the next validation, at which 
time, the audit trad is transferred to the memory of the 
ins ui u ttua where validation occurs, and erased from the 

75 wallet In addition to providing a record of transactions of 
me wallet the audit trail also allows computation of the 
balance of a user who has tost his wallet, by tracing his 
credits and debits in the audit trails of the wallets with which 
the transactions occurred. 

20 The wallet is also provided with user identification 

apparatus, which may comprise any conventional cryp- 
tographic system, to prevent unauthorized access to the 
wallet or tampering therewith. Thus, the owner of a wallet 
wffl have, tor example, a password which ts entered via the 

25 keyboard to the wallet to identify htm at the start of a 
transaction. 

The waflet also comprises, at any given time, an unfor- 
geable "present value*. For purposes of this application, 
unforgeabta is defined as cryptographicalr/ signed in such a 

J0 way as to force one to crack the cipher in order to forge a 
message. The vafue of the wallet is registered in the 
memory of the wallet and any increase or decrease due to 
receipt or payment of money is carried out and registered in 
accordance with a certain protocol, the new value being 

35 reg is tered as the current present value. A conventional 
cryptosyetam, such as the Data Encryption Standard. "0ES 
Modes of Operation*, FIPS PUB 81, Federal Information 
Processing Standards Publication, Dec 2. 1980. may be 
utilized for encoding and decoding of information transferred 

40 from one wallet to the other. 

In order to provide unforgeable present values and 
receipts, an asymmetric or public key encoding system is 
preferably employed for identity verification throughout the 
transaction. This means that a secret key, hard wired into 

45 the apparatus and known to no-cne, is used to encode the 
data to be transferred to the other apparatus which is a 
party to the transaction. Similariy, data received from the 
other apparatus w2J be received encoded by the secret key 
of the other apparatus. A public key, or known decoder 

50 means, ts provided to each apparatus to permit it to decode 
the data received by it before proceeding with the next step 
of the transaction. Thus, white any apparatus is capable of 
decoding the data received by it only the legitimate wallet 
can encode data it transmits with its own secret key. This 

55 means that forgery is possible only by cracking the cipher 
using the public key. 

A particularly suitable public key cryptosystem has 
been proposed by Rh/est Shamir and Adetman in "A 
Method for Obtaining Digital Signatures and Public Key 

60 Cryptosystems", Comm. ACM, Vat 21. February 1978, pp. 
120-126, to be utilized for internal encoding of data to be 
transferred between wallets. Alternatively, any other public - 
key signature cryptographic system wiB suffice, such as mat 
described by Rabin, M.O. in "Digitated Signatures and 

65 Pubfic-Key Functions as Intractable as Factorization*, 
MfT/LCS/TR-212, January 1979. 
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The various keys and passwords utilized by the owner 
(or user identification, By iris waBei tor decoding and by the 
vacating institution. v?3 be tound in the memory of the 
wallet It w3l be appreciated thai the preferred user iden- 
tification and identity verification means are also suitable for 
identification from alar, such as through a telephone Gne or 
other means of communication, 

ft is a particular feature of the present embodiment that 
only the public keys of (he banks or validating institutions 
and the public key of the owner signed by the bank need 
be* retained in the memory of the wallet to permit transac- 
tions with aQ other waBets. Thus, a much smaller memory is 
required than in existing devices. 

The particular advantage of using a public key cryo- 
tosystem is that even if someone should manage to break 
the cipher in one wallet to forge transactions therein, he wit) 
be unable to subvert the entire banking system. Further- 
more, if the wallet is forged, it wiD be detectable by means 
of the autft trafls discussed above. 



Wallet 
(Identification) 



(Audit trail) ; > 



where (DATA) — > indicates the transfer of data in the 
direction indicated by tre arrow. 

Transfers of money are effected try means of a trans- 
action protocol Operation of the wallet in general terms, is 
as follows. For exempts, suppose i and j have agreed on a 
payment of v dollars by i to j. Each must first identify 
himseff to his wallet by entering his password on the key- 
boardl Each enters the value v into his wallet and indicates 
whether H should be paid or received Thus, a transaction 
may take place only if Doffl parties agree to iu 

The wallets are row counted to one another via con- 
necting means which may be a connecting jack or a tele- 
phone modem or any other means of coupling the waQets 
for transmitting and receiving of information from one an- 
other. The transfer of value from Ts wallet to fs is carried 
out through a proper transaction protocol It wiD be appre- 
ciated that such a transfer is only permitted if i's wallet has 
the necessary value, te^ if the value of the paying wafiet is 



Preferably the wallet also includes means tor destroy- 
ing the intonation stored therein which is activated in the 
event that an attempt is made to penetrate the waQet 
physically or through some signals other than the legitimate 

5 sgnais used in the user identification means or in the 
protocols. For example, (he wafiet may be constructed in 
such a manner that opening it wiD short circuit the batteries, 
or destroy the microprocessor, or that x-rays or other at- 
tempts to read the encoded information wiQ serve to destroy 

to the cooing. This serves to further prevent compromise of 
the whole monetary system by unauthorized entry into a 
wallet 

The wallet is validated through a renewal protocol with 
an authorized institution, such as a bank. The complemen- 
ts tary device owned by the institution would read the audit 
trail of the waSel since lis latest validation, erasing it from 
the waQet insert the new value and supply additional in- 
formation which may be useful. A flow chart of a suitable 
renewal protocol is given in the following chart 
20 RENEWAL PROTOCOL 



Authority 



(Identification) 



(signed new keys) 

(list of invalid wallets) 



40 



greater than or equal to the sum to be paid. The result of 
45 the transaction is that the value in Ts wallet has been 
reduced by v whBe the value in j's wallet has increased by 
v, the sum of (he values of the wallets not being changed 
by the transaction. 

An unforgeable receipt or cryptograrjhtcaRy signed 
50 proof of having paid the amount of the transaction, is 
provided to Ps wallet in the form of data encoded by fs 
secret code, end registered therein. At the same time, an 
unforgeable proof of receipt of payment is le g& t ei ed in j's 
, wallet in the form of data encoded by i's secret code. 
55 These proofs of payment and receipts are added to the 
wallet's audit trail 

A flow chart of an example of a suitable transaction 
protocol including a public key cryptosystem is as follows. 
TRANSACTION PROTOCOL 

60 
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j/allet of _i 
— >(i Password; Pay vi) 
Is Vi < vi? 

If yes, (EH) > 

If no, Dx(ei,i) > 
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Wallet of j 
— >(j Password; Receive vj) 



Is vi = vj and is t reasonable? 

If no, (EM) > 

If yes, (ej,j):= Ex(Dx(ej,j)) 

<- 

Di (vi,t, j) > 

(v",t",i"):=Ej(Dj(vj,t,j)) 
If (v«,t»,i») = (vj,t,i), 
then Vi : = Vi - vi 



(ei,i):= Ex(Dx(ei f i)) 
-(vj, t, Dx(ej,j) 



-Dj (-vj,t,i) 



(v* ,t' ,j'):=Ei(Di(vi,t, j)) 
If (V.t'J') = (vi f t,j) f 
then Vj: = Vj + vj 



where: Vy present value ol waflet ol y, vy ° value in 
transaction involving weBet y, t ° real time: (DATA) — > » 
transfer of data in the direction of the arrow; and (EM) — > 
* transmission of an Error Massage, terminating the pro- 
toco). 

Operation of the transaction protocol is as follows, with 
reference to the transaction protocol flow chart and with 
further reference to the transfer of the value v from t to j. 
Assuming a public-key cryptosystern is used, the pub&c-key 
of user i is a pair cf operators (E, Di) each of which is 
operative to cancel the operation of the other, lew, for every 
word W. Ei(Di{W)) » W. Operators Ei and Di serve to 
encode and decode data being transmitted to and from 
waJIei L In order to operate Ej, one must use the public-key 
ei, and in order to operate Di, one must use the secret-key 
01 The knowledge of ei does not help to determine dL Even 
the owner of a wallet does not know the secret-key. dl 
stored therein. 

The present contents of user j's waflet include ex (the 
pubfo key of the bank or other renewing institution) and dj 
O's secret key), as well as Dx(ej j) <ps puttie key certified by 
the bank and indicating that mis is a valid wafiet). t repre- 
sents real time as measured by the real time dock. 



*o After i and j identify themselves to their wallets by 

inserting their respective passwords, and have inserted the 
value of the present transaction, the wallets are coupled to 
one another to establish communication, le, direct coupling 
or via a telephone. It wifl be appreciated that coupling of the 

45 wallets may afternativery be effected before user identifica- 
tion. 

The value of the desired transaction vi is compared 
with the current present value Vi of i's waBat to determine 
whether the transaction is permitted. H vi is greater than Vi, 

50 en error message is sent, thereby terminating the protocol 
If vi cs less man or equal to Vi. then i*s pubftc key 
certified by the bank, namely i*s public key and identity (eij) 
encoded by operation thereon of the bank's public key 
(operator Dx) is trans mi tt e d to j's wallet In f s wallet this 

55 date is decoded by the op e r ation of the public key of the 
bank (Ex). 

Upon receipt of this data* the value j punched into his 
waUet as being the amount of the transaction (vj). the real 
time (0, and f s public key certified by the bank, namery fs 

6° public key and identity (ejj) encoded by operation thereon 
ol the bank's secret key (operator Dx) are all transmitted to 
i's waOel In i*s wallet j's public key is decoded by the 
operation of the public key of the bank (Ex). 

Wallet i now compares vi and vj to verify thai the value 

65 of the transaction is equal It also compares t received from 
wallet j with the real time at which it transmitted its identify- 
ing transmission to be sure that no more than a predeter- 
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mined limited amount of time has passed since initiation of 
the transaction. If either vi *vj or there is a mismatch of real 
time i (e.0., ti«*lj + const), an error message is sent, 
terminating the protocol 

If vi = vj and t is reasonable, transfer of the value of 
the transaction is effected. J sends a receipt to i which 
includes the value paid by i f-vj), me real time, and the 
identity of i. all encoded by Dj (J's secret code known only 
to his wafiety. Since Dj ia secret even to j, this receipt is 
unforgaatto unless the cipher is broken. Similarly, i sends a 
receipt to j which includes the value received by j (vi), the 
real time, and the identity of j, aU encoded by Oi G's secret 
code known only to his wallet). Since Di is secret even to i. 
this receipt is unforgeabte unless the cipher is broken, t 
prevents illegal duplication of the transaction. 

In order to insure that the receipts correspond to the 
expected values and time of the transaction, each of wallets 
i end j decode the receipt using the public code of the other 
(Ei and Ej) and oo mpai e the decoded data with the ex- 
pected values of v, t and I If they are identical the new 
present value of wallet i, Vi, which equals former VI - vi, is 
registered in the rnernory of wallet i. and the new present 
value of wallet j, Vj, which equals former Vj + vj, is 
registered in the memory of wallet j. To avoid cutting 
communication before the last transmission, Le- when only 
one receipt has been sent, secret exchange methods can 
be used, such as those set forth in Blum, M., "How to 
Exchange Secret Keys", Proceedings of the 15th Annual 
ACM Symposium on Theory of Computing, and Even, S. 
GoJdreich, O. and Lempel. A» "A Randomized Protocol for 
Signing Contracts", Proceedings of Crypto 82. Jury 1883, 
between the last two communications. 

It wis be appreciated that whfia each wallet preferably 
has its own sell-contained power source, the value of the 
wallet is stored in a non- volatile memory, so that if the 
battery is inoperative, a transaction may not take place, but 
the owner of the wafet win not toss his money. 

The wallets are protected against toss of money in 
case of loss of the waOet or misuse by someone other than 
the owner, since one must know the password in order to 
operate the waflet They are protected against fraudulent 
transactions, as by eavesdropping on telephone lines and 
att e mpti n g to duplicate the tr ansacti on, by real time t which 
must be reasonable m order for the apparatus to carry out 
the transaction. Similarly, they are protected against forging 
a transaction over the tetephone tines since a signed or 
encoded receipt is required to conclude the transaction. 
And they are protected against the coupfing of two legiti- 
mate wallets via improper hardware. 

It wiD be appreciated by those stifled in the art that the 
invention is not limited to what has been shown and de- 
scribed hereinabove merety by way of example. Rather, the 
scope of the invention is limited solely by the claims which 
follow. 

Claims 



1. Apparatus for effecting and recording monetary transac- 
tions cornpnsing: means for registering the present value of 
money therein; means for setectabfy adjusting the registered 
value to setectabfy indicate payment and receipt responsive 
to a manual control input; and identity verification means 
coupled to the means tor adjusting for activation thereof. 

2. Apparatus according to claim ^ and wherein said means 
for setectabfy adjusting comprises means for determining 
whether the transaction is permitted; and means for effec- 



ting transfer of value coupled to the means tor registering 
present value. 

3. Apparatus according to claim 2 and wherein said means 
5 for effecting transfer comprises secret key encoder means 
arranged to encode data to be transmitted by the apparatus, 
and known key decoder means ai i ange d to decode en- 
coded data received by the apparatus. 

10 4. Apparatus according to any preceding daim and further 
compnsng cryptographic owner identification means. 

5. Apparatus according to claim 2, or daim 3 or 4 when 
appended thereto and wherein said means tor determining 

is includes means for comparing the value of the transaction 
with the registered present value. 

6. Apparatus according to daim 2, or daim 3, 4 or 5 when 
appended thereto, and whererin said means tor determining 

20 includes means tor determining whether the real time of the 
transaction talis within a predetermined range. 

7. Apparatus according to any preceding claim and wherein 
said identity verification means comprises a public key 

25 cryptosystem. 

a. Apparatus according to any preceding daim and further 
comprising means for destroying the registered infbrrnatron 
activated by physical tampering with the apparatus. 

30 

9. Apparatus according to any preceding claim and further 
co mprisin g means for institutional validation of the appara- 
tus. 

35 10. Apparatus for effecting and recording monetary transac- 
tions cu n i uT t su tg : means for registering the present mone- 
tary value of the apparatus: means operative in response to 
a first manual control input for identifying a permitted user; 
means operative in response to a second manual control 

40 input for registering the monetary value of a transaction; 
means for transmitting an encoded output signal corre- 
sponding to identification of the apparatus; means for re- 
ceiving an encoded input signal corresponding to identifica- 
tion of an apparatus with which the transaction is to be 

45 effected; means for decoding and verifying the encoded 
received signal; means for transmitting an output signal 
corresponding to the monetary value of the transaction to 
the apparatus with which the transaction is to be effected; 
means for receiving an input signal corresponding to the 

50 monetary value of the transaction from the apparatus with 
which the transaction is to be effected; means for determin- 
ing whether the transaction is permitted; means for transmit- 
ting an encoded output signal corresponding to the mone- 
tary value and draco on of the transfer In the transaction to 

55 the apparatus with which the transaction is to be effected; 
means for receiving an encoded input signal corresponding 
to the monetary value and direction of the transfer in the 
transaction from the apparatus with which the transaction is 
to be effected; means for decoding and verifying the re- 

60 carved signal; and means for adjusting the registered 
present value in accordance with the transfer effected by 
the transaction. 

11. Apparatus according to claim 10 and wherein each of 
65 said means for transmitting comprises secret encoder 

means for encoding said output signals. 

12. Apparatus according to daim 10 or 11 and wherein 
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each of sat* means for receiving comprises known decoder 
means for decoding said input signals. 

13. Apparatus according to claim 10. 11 or 12, and wherein 

said maans for determining includes maans for comparing s 
the value of the transaction with the registered present 
value. 

14. Apparatus according to claim 10, 11, 12 or 13, and 
wherein said means for determining includes a real time '0 
clock and means coupled to said real tune clock and to said 
means for receiving for determining whether the real time of 

the transaction faOs within a predetermined range. 

15. Apparatus according to any one of claim 1 to 9, is 
wherein said identity verification means includes crypto- 
graphic means. 

16. Apparatus according to claim 15, wherein said cryp- 
tographic means is an asymmetric cryptographic means. 20 

17. Apparatus according to any preceding claim, which has 
the general size, shape and portability of a pocket calcula- 
tor. 

25 



30 



35 



40 



45 



50 



55 



60 



65 



7 



0 172 670 




□□□□□ 

ma man 
□□□□□ 



14 



FIG 1 



RAM 



22 



2A 



T.QD. 
CLOCK 



CONTROLLER 



E z PRDM 



26 



BUS 



34 



28 



CPU + ROM 

inte|fK2e 



20 



30 



FIG 2 



SCREB^ [kB^ |I/ q JACK| 38 



8 



